Why are banks still getting authentication so wrong?

Re:Why are banks still getting authentication so wrong? by john01dav on Tuesday May 13, 2025 @03:10PM (#43976496)

Some banks do it properly. For example, my local credit union does Google Authenticator (actually TOTP, but they call it Google Authenticator). I use it with Authy on F-Droid.

[ Parent | on HN ]

Re:Why are banks still getting authentication so wrong? by xp84 on Tuesday May 13, 2025 @03:19PM (#43976575)

Best thing that ever happened in this bleak security world is Google Authenticator. I haven’t used that app itself in years, preferring others, but the existence of it and it being non-proprietary, has done a lot to bring over the moderately-security-competent companies to thinking “hey, I guess we should support this.” Obviously that group excludes every American bank, every power utility, etc. They all want to email or text me a freaking code at each login for some reason.

[ Parent | on HN ]

Re:Why are banks still getting authentication so wrong? by poisonborz on Tuesday May 13, 2025 @03:15PM (#43976541)

Please do not use Authy, lacks essential features and it was bought by a bad actor.

[ Parent | on HN ]

Re:Why are banks still getting authentication so wrong? by clay10 on Tuesday May 13, 2025 @03:26PM (#43976649)

I switched from Lastpass Authenticator to Authy after the hack. The lack of the "upcoming key" feature has been a huge paint point.

Any suggestions for what is better?

[ Parent | on HN ]

Re:Why are banks still getting authentication so wrong? by error503 on Tuesday May 13, 2025 @03:45PM (#43976872)

Try Aegis https://getaegis.app/

[ Parent | on HN ]

Re:Why are banks still getting authentication so wrong? by johnisgood on Tuesday May 13, 2025 @03:19PM (#43976579)

I recommend KeePassDX from F-Droid for TOTP.

[ Parent | on HN ]

Re:Why are banks still getting authentication so wrong? by hackeman300 on Tuesday May 13, 2025 @03:21PM (#43976601)

Can you elaborate? Is twilio a bad actor?

[ Parent | on HN ]

Re:Why are banks still getting authentication so wrong? by Muromec on Tuesday May 13, 2025 @03:22PM (#43976612)

wait, which bad actor? I use it for everything and hear about it first time

[ Parent | on HN ]

Re:Why are banks still getting authentication so wrong? by gtkspert on Tuesday May 13, 2025 @03:19PM (#43976576)

Is there a way off Authy yet?

[ Parent | on HN ]

Re:Why are banks still getting authentication so wrong? by john01dav on Wednesday May 14, 2025 @02:50AM (#43981593)

Well that's a mistake. I'm using aegis but a neuron crossed and wrote the wrong word, and I can't edit my original post now

[ Parent | on HN ]